General
- Target 2026-07-01_fabfc31eba6ad554bbc87b9b4f634aa7_elex_mafia_stealc_tofsee
- Size 444KB
- Sample260701-wmteksc161
- SHA256 5f1ca97e5cadd337d71f224f0853620f19c3f646fdd35e44ab28930d27fba916
- MD5 fabfc31eba6ad554bbc87b9b4f634aa7
- SHA1 435144d8ea65cb874858b333e0ff8cdfa461ca51
- SHA512 64aaacf879ed591a2faf268dc4708de43a175a3bbbc80ba05faf7ba1fad1c1d7d07613548570d3b3c37c6a77be21efc5f527e4586655ac7cef2506d5a82f2756
- SSDEEP 12288:Nb4bZudi79L3NaBu5OhUpX+9fJYOjH4uaA:Nb4bcdkL3NYu5/pXoaJu
- TLSH T105A4E0203482C037E2A715344BE5DB76667E79B50B36A8C73BC41BAD2E742E2E634357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_fabfc31eba6ad554bbc87b9b4f634aa7_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_fabfc31eba6ad554bbc87b9b4f634aa7_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_fabfc31eba6ad554bbc87b9b4f634aa7_elex_mafia_stealc_tofsee
- Size 444KB
- SHA256 5f1ca97e5cadd337d71f224f0853620f19c3f646fdd35e44ab28930d27fba916
- MD5 fabfc31eba6ad554bbc87b9b4f634aa7
- SHA1 435144d8ea65cb874858b333e0ff8cdfa461ca51
- SHA512 64aaacf879ed591a2faf268dc4708de43a175a3bbbc80ba05faf7ba1fad1c1d7d07613548570d3b3c37c6a77be21efc5f527e4586655ac7cef2506d5a82f2756
- SSDEEP 12288:Nb4bZudi79L3NaBu5OhUpX+9fJYOjH4uaA:Nb4bcdkL3NYu5/pXoaJu
- TLSH T105A4E0203482C037E2A715344BE5DB76667E79B50B36A8C73BC41BAD2E742E2E634357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.